Associate Director AI-Driven Threat Detection & Response

Novartis; Sabadell; Hybrid; EUR 58,000 - 108,000; Full time

Benefits offered by this job

Flexible and hybrid working options

14 weeks paid parental leave

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Job summary

Novartis in Barcelona, Spain, seeks an Associate Director for the Cyber Security Operations Center to lead strategic threat detection, incident response, and advanced analytics efforts.

The role blends hands-on expertise with leadership, driving AI-enabled automation, security monitoring improvements, and cross-functional collaboration with global stakeholders to strengthen cyber resilience across the enterprise.

Qualifications

• 8+ years of cybersecurity experience, including 5+ years in Security Operations, Threat Detection, Incident Response, and Threat Hunting.

Responsibilities

• Shape and influence global TDR strategy, driving operational excellence, innovation, and advanced cyber defense capabilities.
• Drive AI adoption, intelligent automation, and emerging technologies to transform detection and response capabilities.
• Lead strategic initiatives in collaboration with global cybersecurity leadership, engineering teams, and key stakeholders.
• Oversee and enhance security monitoring, threat detection, and triage capabilities across the Novartis IT ecosystem.
• Leverage SIEM, advanced analytics, and threat intelligence to identify sophisticated threats and improve detection coverage.
• Drive improvements in detection engineering, security controls, and capabilities against evolving TTPs.
• Serve as a senior escalation point for complex security incidents involving sophisticated threat actors.
• Lead critical investigations and response activities, including forensic analysis, containment, stakeholder communication, and remediation.
• Translate incident findings into actionable recommendations to strengthen organizational cyber resilience.
• Drive continuous improvement of TDR processes, investigation methodologies, and response playbooks.
• Collaborate with engineering teams to advance security orchestration, automation, and technology integration.
• Provide technical mentorship, promote investigation quality, and influence best practices across global TDR teams.

Skills

Cybersecurity

Security Operations

Threat Detection

Incident Response

Threat Hunting

Mentoring

MITRE ATT&CK

AI & Automation

Scripting (KQL SPL Python)

Education

Bachelor's degree

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

EDR/XDR

Job description

Novartis in Barcelona, Spain, seeks an Associate Director for the Cyber Security Operations Center to lead strategic threat detection, incident response, and advanced analytics efforts.

The role blends hands-on expertise with leadership, driving AI-enabled automation, security monitoring improvements, and cross-functional collaboration with global stakeholders to strengthen cyber resilience across the enterprise.